This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/1/323830343a383030383a3a2f33322d313238203d3e20323731373235.roa
File:                     323830343a383030383a3a2f33322d313238203d3e20323731373235.roa (raw, json)
Hash identifier:          mDkyoTvChvLyd1Wqb2ug3HgYmc4bk8uIvvXY7Hyan8E=
Subject key identifier:   B0:C0:3D:93:85:67:FB:5A:31:23:0A:4C:E4:8B:17:D1:77:AC:D1:2B
Certificate issuer:       /CN=85AA1AADB861F5B21F30CB23D64C7291D94EA277
Certificate serial:       175C5D617463FC1BA3725D0155632F6A2DD69534
Authority key identifier: 85:AA:1A:AD:B8:61:F5:B2:1F:30:CB:23:D6:4C:72:91:D9:4E:A2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AA1AADB861F5B21F30CB23D64C7291D94EA277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/1/323830343a383030383a3a2f33322d313238203d3e20323731373235.roa
Signing time:             Thu 03 Jul 2025 18:07:26 +0000
ROA not before:           Thu 03 Jul 2025 18:02:26 +0000
ROA not after:            Thu 02 Jul 2026 18:07:26 +0000
asID:                     271725
IP address blocks:        2804:8008::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5c:5d:61:74:63:fc:1b:a3:72:5d:01:55:63:2f:6a:2d:d6:95:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85AA1AADB861F5B21F30CB23D64C7291D94EA277
        Validity
            Not Before: Jul  3 18:02:26 2025 GMT
            Not After : Jul  2 18:07:26 2026 GMT
        Subject: CN=B0C03D938567FB5A31230A4CE48B17D177ACD12B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:87:8b:db:da:6c:7f:09:a6:d3:0b:ab:f5:
                    e8:c5:c4:25:f3:bf:7c:51:14:ca:86:c0:00:96:62:
                    ac:04:3b:36:2d:c4:9a:ae:e4:90:13:58:67:bb:a4:
                    97:4f:67:6c:4a:ae:44:b1:42:9b:dc:e8:56:d3:68:
                    a2:62:e9:b6:34:14:d9:96:c1:71:d5:b6:ea:d7:01:
                    24:df:cf:8e:b4:87:9c:cd:dd:ff:bd:62:4f:cc:12:
                    6b:cd:4b:46:ad:6c:17:20:66:4b:f4:bb:91:d9:f8:
                    70:94:b7:7c:72:cd:26:6b:5c:f6:8f:8c:2b:fc:7e:
                    92:8e:67:fd:a9:53:d0:db:16:ad:dc:5c:f4:a3:89:
                    e4:3d:ca:45:40:ba:e8:85:27:25:a4:5b:45:f1:7f:
                    68:c2:74:d3:9e:93:e2:cd:46:88:79:e7:5e:e4:53:
                    b3:b8:db:d1:09:da:a2:d7:d5:c9:04:0f:93:83:71:
                    e8:de:01:cd:27:58:37:97:26:ae:c2:3c:dd:bb:c1:
                    7d:f4:b2:ce:70:fa:87:c4:ef:94:9e:50:ac:a0:b4:
                    5d:b6:f4:8e:81:86:e4:62:1f:e3:9f:5a:35:4e:77:
                    eb:e8:8b:e7:21:6d:68:00:9d:01:92:43:d8:bc:d6:
                    fb:15:01:79:10:30:6d:fc:75:6a:be:88:58:c2:f0:
                    2c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C0:3D:93:85:67:FB:5A:31:23:0A:4C:E4:8B:17:D1:77:AC:D1:2B
            X509v3 Authority Key Identifier:
                keyid:85:AA:1A:AD:B8:61:F5:B2:1F:30:CB:23:D6:4C:72:91:D9:4E:A2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/1/85AA1AADB861F5B21F30CB23D64C7291D94EA277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AA1AADB861F5B21F30CB23D64C7291D94EA277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/1/323830343a383030383a3a2f33322d313238203d3e20323731373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8008::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:b2:ff:53:b5:c8:5d:74:82:ba:4b:60:dd:4c:a6:c5:11:dc:
         b3:8c:bc:ac:7c:ff:e5:0b:cc:2d:12:da:84:25:4a:7d:ac:6e:
         2d:88:d4:38:ae:c6:0c:2a:0f:11:5f:e7:4a:69:f6:b7:0c:43:
         a6:51:ab:4e:94:83:23:db:7f:53:79:a0:95:b1:96:cf:bd:5f:
         aa:83:3d:f7:b7:3d:89:f9:2f:30:cf:85:62:b9:65:eb:ca:3f:
         97:d4:5a:96:df:7a:ff:79:78:22:7e:23:8e:2b:e9:85:82:34:
         fd:d3:3c:b5:08:30:83:4a:c6:c9:56:bc:67:95:02:7f:90:a2:
         9d:fe:4f:e0:0c:f0:86:bb:d2:25:8a:c9:ec:e0:5d:4d:a8:66:
         7c:e9:eb:78:9c:bb:b6:5f:5b:99:b5:91:85:8c:b6:79:eb:67:
         af:6c:00:0b:a2:cf:22:db:20:47:a5:47:27:0c:3a:91:fd:7a:
         cb:2d:7f:98:e6:d3:de:8b:5e:e4:92:5d:d5:24:d1:b3:dc:c6:
         2b:37:df:37:d5:b3:47:64:4a:88:d4:c1:e9:ba:d9:93:c7:f1:
         ba:78:0e:af:58:41:ea:28:7f:cd:8f:80:16:93:fe:a0:f7:2d:
         71:38:6c:0e:5d:61:31:9e:67:07:8f:cf:0c:98:59:5b:22:ea:
         43:e7:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----